DCS932L-Emulation-CVE-2024-37606-Attack

让仿真再次变得简单 欢迎！本仓库提供了用于仿真 D-Link DCS-932L 固件并演示 CVE-2024-37606 漏洞的工具和环境。它包含了预补丁的二进制文件和必要的库，简化了仿真设置，因此您无需手动使用 Ghidra 等工具进行修补。 CVE-2024-37606 本项目包含一个针对 CVE-2024-37606 的概念验证漏洞利用脚本（CVE-2024-37606-DCS932L.py）。该漏洞涉及 alphapd 服务中的缓冲区溢出。请负责任地使用，仅用于教育目的。 点击图片观看视频 仿真的修改 为增强固件仿真环境的功能和易用性，进行了以下几项修改： 1. 启动脚本：...

The vulnerability of the sub_42EF14() function in D-Link DCS-932L microprogrammed camera software allows a intruder to execute arbitrary commands.

The vulnerability of the sub42EF14 function /bin/alphapd of the D-Link DCS-932L microprogrammed surveillance camera is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

CVE-2026-36983

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection...

D-Link DCS-932L command injection vulnerability

The D-Link DCS-932L is a home-use infrared wireless network camera launched by D-Link in 2012. The D-Link DCS-932L has a command injection vulnerability. This vulnerability stems from the sub42EF14 function in the /bin/alphapd file, which fails to properly handle the LightSensorControl parameter...

CVE-2026-36983

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection...

CVE-2026-36983

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection...

D-Link DCS-932L 安全漏洞

The D-Link DCS-932L is a network surveillance camera from D-Link Corporation. It is used for security and monitoring purposes. The D-Link DCS-932L version 2.18.01 has a security vulnerability. This vulnerability stems from improper handling of the parameter LightSensorControl by the function...

CVE-2026-36983

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection...

CVE-2026-36983

The D-Link DCS-932L microprogrammed surveillance camera, running version v2.18.01 , is vulnerable to Command Injection due to insufficient input validation. The flaw resides in the sub_42EF14 function within the /bin/alphapd file, where the LightSensorControl argument is improperly handled. A rem...

CVE-2026-36983: Improper Neutralization of Special Elements used in a Command

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection...

VulnCheck KEV: CVE-2025-5571

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

EUVD-2025-16840

Malicious code in bioql PyPI...

EUVD-2025-16839

Malicious code in bioql PyPI...

The vulnerability of the setSystemAdmin function in D-Link DCS-932L microprogrammed camera software allows a intruder to execute arbitrary commands.

The vulnerability of the setSystemAdmin function in the /setSystemAdmin file of D-Link DCS-932L microprogrammed surveillance cameras is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the setSystemWizard() and setSystemControl() functions in D-Link DCS-932L IP camera software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setSystemWizard and setSystemControl functions in D-Link DCS-932L IP cameras exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the setSystemEmail() function in D-Link DCS-932L microprogrammed video cameras allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the setSystemEmail function in D-Link DCS-932L microprogrammed surveillance cameras is related to the issue where the operation data is written outside of the buffer in memory when processing the EmailSMTPPortNumber parameter. Exploiting this vulnerability allows a remote...

D-Link DCS-932L setSystemAdmin File Command Injection Vulnerability

The D-Link DCS-932L is a network surveillance camera from China AUO D-Link. It is used for security and surveillance. The D-Link DCS-932L suffers from a command injection vulnerability that stems from the parameter AdminID in the file /setSystemAdmin failing to correctly filter constructed comman...

D-Link DCS-932L Buffer Overflow Vulnerability

The D-Link DCS-932L is a network surveillance camera from China AUO D-Link. It is used for security and surveillance. The D-Link DCS-932L suffers from a buffer overflow vulnerability that originates from the parameter EmailSMTPPortNumber in file /setSystemEmail failing to properly validate the...

CVE-2025-5571

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-5573

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemWizard. The manipulation of the argument AdminID leads to os command injection. The attack may be launched remotely. T...